adding cards API endpoints